search

dymosoftware / dymo-connect-framework

DYMO Connect Framework for Javascript.
Other
86 stars 54 forks source link

Warning: This class allows Google to send data from non-Google and thus UNTRUSTED pages to Google's servers. #49

Open timint opened 2 years ago

timint commented 2 years ago

I found this in your source code on line 36730 and 37021

image https://github.com/dymosoftware/dymo-connect-framework/blob/master/dymo.connect.framework.full.js#L36730

That looks like a strong desire for trouble in 2022. What are you using it for?

Have you had any discussion on removing the Google Closure Javscript Library and go dependancy free instead? You might not need all that extras and maybe could rely solely on the builtin XML Parser in JavaScript? https://www.w3schools.com/xml/xml_parser.asp

You might be surprised how much more effective you could be with less code to maintain.